Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File: ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier: sNRi/VKtQw31bln8Mn5zyOdI8XyF+NCQu1oUmKtB2XA=
Subject key identifier: 7F:BD:BD:1B:16:BA:B1:57:2C:FE:D0:E0:FF:C9:49:F8:FB:61:AD:44
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 019A7225920B52C235FA394550A977A26988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number: 0BD2
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: aq7ENEWK8ARkG2Kmh3dv5iQ404Mq16Kh9nRmF4JAvRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:92:0b:52:c2:35:fa:39:45:50:a9:77:a2:69:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=7fbdbd1b16bab1572cfed0e0ffc949f8fb61ad44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:74:40:ad:33:9e:57:a9:39:2f:59:26:61:
4f:74:f7:fa:dc:d7:5d:5b:55:1d:4c:13:d0:d7:40:
e2:58:62:90:22:fa:82:03:a2:83:4a:72:75:38:8d:
78:ab:50:01:ec:92:16:8b:b4:5e:fc:2d:cf:22:ec:
b8:c4:4d:4c:7f:68:46:68:2c:2d:34:d7:68:44:90:
30:59:1c:c1:8e:e3:63:3d:62:c8:9d:2e:13:25:2f:
bb:e8:48:d8:b4:9a:82:2a:8d:62:8f:ea:1e:48:45:
8d:1b:7e:d2:78:89:d7:9c:49:c8:fb:20:07:1c:1f:
7e:57:48:b7:58:ff:90:e9:9c:29:d6:19:8e:68:e5:
37:41:0b:a4:67:05:12:55:9d:8c:10:cb:65:ca:16:
61:64:75:95:a3:d8:fb:71:24:bf:f5:af:35:b8:f3:
c8:1d:56:d3:92:93:cf:6b:b7:73:43:36:dd:cf:f9:
e8:5b:d4:9a:70:a4:b1:e6:0b:32:dc:19:61:76:3e:
21:3c:34:c8:55:75:76:59:bb:45:ef:65:24:d2:f4:
02:9e:90:8e:50:30:95:65:70:7d:bb:55:d7:71:dc:
04:2a:95:17:41:27:66:ea:52:72:f1:6e:65:c6:11:
c2:8f:79:5c:2a:68:72:f6:af:a1:a3:01:f3:f3:0d:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:BD:1B:16:BA:B1:57:2C:FE:D0:E0:FF:C9:49:F8:FB:61:AD:44
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2e:92:0d:6e:de:1d:08:83:0d:c5:87:7f:f3:c0:71:ba:b6:
34:ec:ad:c5:a0:c9:6f:fc:54:25:24:b9:10:43:89:57:40:88:
8e:72:83:ec:7a:d9:08:56:ff:d6:41:98:fc:40:17:43:78:bf:
72:55:af:cd:0c:58:ab:29:56:48:73:1f:9f:03:79:7d:8e:b4:
4a:33:76:d7:52:85:82:e1:77:87:8c:5c:21:d6:d1:ea:87:ca:
94:ec:0d:32:d5:2d:dc:4b:f1:55:5d:85:0f:73:06:ee:b4:4c:
6c:e8:74:03:11:7f:a1:07:38:4f:d7:f5:e5:0e:5b:c1:71:3f:
1d:c1:5b:22:ca:75:3b:12:51:66:92:ab:b0:dd:14:ce:77:0a:
18:6e:09:3d:7a:9d:cd:17:db:1d:fe:58:34:30:0a:0b:22:56:
51:4b:32:2c:ec:41:a4:56:57:27:81:65:1a:34:8b:37:71:ec:
52:9f:2d:07:7a:e8:d4:98:41:1a:9d:65:df:29:15:b7:44:c1:
41:38:74:f7:00:fd:3c:21:5a:af:b9:f4:1a:1c:30:43:49:ab:
a7:70:c8:00:7b:e9:e3:f2:18:ab:79:e0:e1:c4:39:db:98:32:
04:3d:a6:7b:71:44:cc:0a:d1:fe:8a:b0:93:d9:8c:91:54:61:
f4:26:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:49 2025 by rpki-client